Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-r4hg-4cpq-q57c: jSuites subect to Cross-site Scripting

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.

ghsa
#xss#js#git

jSuites subect to Cross-site Scripting

Moderate severity GitHub Reviewed Published Jan 31, 2023 to the GitHub Advisory Database • Updated Feb 1, 2023

Related news

CVE-2022-25979: Snyk Vulnerability Database | Snyk

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Editor() function.